USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities
Ubuntu fixes CVE-2025-27558, a Linux WiFi mesh flaw caused by an incorrect CVE-2020-24588 fix, letting physically proximate attackers inject packets, plus other kernel updates.
Ubuntu released USN-8715-2 for the Linux kernel on the AWS FIPS variant. Siebe Devroe, Heloise Gollier, and Mathy Vanhoef discovered CVE-2025-27558: the kernel's WiFi implementation mishandles aggregated frames in mesh networks due to an incorrect fix for CVE-2020-24588, allowing a physically proximate attacker to inject packets. The update also corrects flaws in x86, cryptographic API, InfiniBand, media, network, and NVMe drivers, and file systems.
- Fixes CVE-2025-27558: WiFi mesh aggregated frame handling flaw enabling packet injection.
- Root cause is an incorrect fix for CVE-2020-24588.
- Discovered by Siebe Devroe, Heloise Gollier, and Mathy Vanhoef.
- Targets Ubuntu's Linux kernel AWS FIPS variant (USN-8715-2).
- Products
- Linux kernelAmazon Web Services
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-24588 | The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the… | 3.5 | 4% | PoC | |
| CVE-2025-27558 | IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks | 9.1 | <1% |
From the original article
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.